@pulumi/okta 4.9.0-alpha.1718431198 → 4.9.0-alpha.1718755579
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/adminRoleCustom.d.ts +105 -107
- package/adminRoleCustom.js +3 -5
- package/adminRoleCustom.js.map +1 -1
- package/adminRoleCustomAssignments.d.ts +12 -18
- package/adminRoleCustomAssignments.js +3 -6
- package/adminRoleCustomAssignments.js.map +1 -1
- package/adminRoleTargets.d.ts +14 -16
- package/adminRoleTargets.js +0 -2
- package/adminRoleTargets.js.map +1 -1
- package/app/accessPolicyAssignment.d.ts +23 -2
- package/app/accessPolicyAssignment.js +23 -2
- package/app/accessPolicyAssignment.js.map +1 -1
- package/app/autoLogin.d.ts +63 -97
- package/app/autoLogin.js +3 -37
- package/app/autoLogin.js.map +1 -1
- package/app/basicAuth.d.ts +30 -33
- package/app/basicAuth.js +4 -7
- package/app/basicAuth.js.map +1 -1
- package/app/bookmark.d.ts +30 -33
- package/app/bookmark.js +3 -6
- package/app/bookmark.js.map +1 -1
- package/app/getApp.d.ts +58 -25
- package/app/getApp.js +2 -2
- package/app/getApp.js.map +1 -1
- package/app/getMetadataSaml.d.ts +11 -5
- package/app/getMetadataSaml.js +2 -2
- package/app/getMetadataSaml.js.map +1 -1
- package/app/getOauth.d.ts +62 -34
- package/app/getOauth.js +2 -2
- package/app/getOauth.js.map +1 -1
- package/app/getSaml.d.ts +75 -56
- package/app/getSaml.js +2 -2
- package/app/getSaml.js.map +1 -1
- package/app/groupAssignment.d.ts +23 -9
- package/app/groupAssignment.js +17 -3
- package/app/groupAssignment.js.map +1 -1
- package/app/oauth.d.ts +135 -273
- package/app/oauth.js +6 -60
- package/app/oauth.js.map +1 -1
- package/app/oauthPostLogoutRedirectUri.d.ts +4 -6
- package/app/oauthPostLogoutRedirectUri.js +1 -3
- package/app/oauthPostLogoutRedirectUri.js.map +1 -1
- package/app/oauthRedirectUri.d.ts +4 -6
- package/app/oauthRedirectUri.js +1 -3
- package/app/oauthRedirectUri.js.map +1 -1
- package/app/oauthRoleAssignment.d.ts +4 -29
- package/app/oauthRoleAssignment.js +4 -29
- package/app/oauthRoleAssignment.js.map +1 -1
- package/app/saml.d.ts +161 -289
- package/app/saml.js +6 -152
- package/app/saml.js.map +1 -1
- package/app/securePasswordStore.d.ts +79 -80
- package/app/securePasswordStore.js +6 -7
- package/app/securePasswordStore.js.map +1 -1
- package/app/swa.d.ts +70 -71
- package/app/swa.js +4 -5
- package/app/swa.js.map +1 -1
- package/app/threeField.d.ts +74 -76
- package/app/threeField.js +5 -7
- package/app/threeField.js.map +1 -1
- package/app/user.d.ts +12 -17
- package/app/user.js +0 -2
- package/app/user.js.map +1 -1
- package/appGroupAssignments.d.ts +6 -8
- package/appGroupAssignments.js +3 -5
- package/appGroupAssignments.js.map +1 -1
- package/appOauthApiScope.d.ts +5 -7
- package/appOauthApiScope.js +2 -4
- package/appOauthApiScope.js.map +1 -1
- package/appSamlAppSettings.d.ts +6 -7
- package/appSamlAppSettings.js +3 -4
- package/appSamlAppSettings.js.map +1 -1
- package/appSharedCredentials.d.ts +61 -63
- package/appSharedCredentials.js +4 -6
- package/appSharedCredentials.js.map +1 -1
- package/appSignonPolicy.d.ts +3 -39
- package/appSignonPolicy.js +3 -39
- package/appSignonPolicy.js.map +1 -1
- package/appSignonPolicyRule.d.ts +69 -361
- package/appSignonPolicyRule.js +1 -278
- package/appSignonPolicyRule.js.map +1 -1
- package/appUserBaseSchemaProperty.d.ts +25 -29
- package/appUserBaseSchemaProperty.js +1 -5
- package/appUserBaseSchemaProperty.js.map +1 -1
- package/appUserSchemaProperty.d.ts +51 -41
- package/appUserSchemaProperty.js +0 -2
- package/appUserSchemaProperty.js.map +1 -1
- package/auth/getServer.d.ts +11 -11
- package/auth/getServer.js +2 -2
- package/auth/getServerPolicy.d.ts +15 -9
- package/auth/getServerPolicy.js +2 -2
- package/auth/getServerPolicy.js.map +1 -1
- package/auth/getServerScopes.d.ts +8 -5
- package/auth/getServerScopes.js +2 -2
- package/auth/getServerScopes.js.map +1 -1
- package/auth/server.d.ts +15 -19
- package/auth/server.js +1 -5
- package/auth/server.js.map +1 -1
- package/auth/serverClaim.d.ts +13 -17
- package/auth/serverClaim.js +1 -5
- package/auth/serverClaim.js.map +1 -1
- package/auth/serverPolicy.d.ts +10 -14
- package/auth/serverPolicy.js +1 -5
- package/auth/serverPolicy.js.map +1 -1
- package/auth/serverPolicyClaim.d.ts +50 -66
- package/auth/serverPolicyClaim.js +0 -25
- package/auth/serverPolicyClaim.js.map +1 -1
- package/auth/serverPolicyRule.d.ts +32 -43
- package/auth/serverPolicyRule.js +0 -2
- package/auth/serverPolicyRule.js.map +1 -1
- package/auth/serverScope.d.ts +16 -20
- package/auth/serverScope.js +1 -5
- package/auth/serverScope.js.map +1 -1
- package/authServerClaimDefault.d.ts +10 -25
- package/authServerClaimDefault.js +0 -9
- package/authServerClaimDefault.js.map +1 -1
- package/authServerDefault.d.ts +15 -19
- package/authServerDefault.js +1 -5
- package/authServerDefault.js.map +1 -1
- package/authenticator.d.ts +53 -61
- package/authenticator.js +11 -11
- package/authenticator.js.map +1 -1
- package/behaviour.d.ts +21 -41
- package/behaviour.js +0 -2
- package/behaviour.js.map +1 -1
- package/brand.d.ts +23 -22
- package/brand.js +8 -4
- package/brand.js.map +1 -1
- package/captcha.d.ts +15 -17
- package/captcha.js +3 -5
- package/captcha.js.map +1 -1
- package/captchaOrgWideSettings.d.ts +8 -43
- package/captchaOrgWideSettings.js +2 -37
- package/captchaOrgWideSettings.js.map +1 -1
- package/domain.d.ts +13 -21
- package/domain.js +0 -2
- package/domain.js.map +1 -1
- package/domainCertificate.d.ts +17 -24
- package/domainCertificate.js +2 -9
- package/domainCertificate.js.map +1 -1
- package/domainVerification.d.ts +4 -10
- package/domainVerification.js +1 -7
- package/domainVerification.js.map +1 -1
- package/emailCustomization.d.ts +38 -222
- package/emailCustomization.js +29 -33
- package/emailCustomization.js.map +1 -1
- package/emailDomain.d.ts +4 -8
- package/emailDomain.js +0 -4
- package/emailDomain.js.map +1 -1
- package/emailDomainVerification.d.ts +3 -7
- package/emailDomainVerification.js +0 -4
- package/emailDomainVerification.js.map +1 -1
- package/emailSender.d.ts +15 -17
- package/emailSender.js +2 -4
- package/emailSender.js.map +1 -1
- package/emailSenderVerification.d.ts +5 -9
- package/emailSenderVerification.js +2 -6
- package/emailSenderVerification.js.map +1 -1
- package/eventHook.d.ts +16 -11
- package/eventHook.js +1 -5
- package/eventHook.js.map +1 -1
- package/eventHookVerification.d.ts +4 -10
- package/eventHookVerification.js +1 -7
- package/eventHookVerification.js.map +1 -1
- package/factor/factor.d.ts +4 -9
- package/factor/factor.js +1 -3
- package/factor/factor.js.map +1 -1
- package/factorTotp.d.ts +12 -21
- package/factorTotp.js +3 -3
- package/factorTotp.js.map +1 -1
- package/getAppGroupAssignments.d.ts +6 -6
- package/getAppGroupAssignments.js +2 -2
- package/getAppSignonPolicy.d.ts +16 -6
- package/getAppSignonPolicy.js +8 -4
- package/getAppSignonPolicy.js.map +1 -1
- package/getAppUserAssignments.d.ts +6 -6
- package/getAppUserAssignments.js +2 -2
- package/getAuthServerClaim.d.ts +15 -12
- package/getAuthServerClaim.js +2 -2
- package/getAuthServerClaim.js.map +1 -1
- package/getAuthServerClaims.d.ts +8 -5
- package/getAuthServerClaims.js +2 -2
- package/getAuthServerClaims.js.map +1 -1
- package/getAuthenticator.d.ts +24 -26
- package/getAuthenticator.js +14 -22
- package/getAuthenticator.js.map +1 -1
- package/getBehaviour.d.ts +6 -8
- package/getBehaviour.js +2 -2
- package/getBehaviour.js.map +1 -1
- package/getBehaviours.d.ts +7 -7
- package/getBehaviours.js +2 -2
- package/getBrand.d.ts +9 -6
- package/getBrand.js +2 -2
- package/getBrand.js.map +1 -1
- package/getBrands.d.ts +2 -2
- package/getBrands.js +2 -2
- package/getDomain.d.ts +11 -14
- package/getDomain.js +2 -8
- package/getDomain.js.map +1 -1
- package/getEmailCustomization.d.ts +14 -9
- package/getEmailCustomization.js +2 -6
- package/getEmailCustomization.js.map +1 -1
- package/getEmailCustomizations.d.ts +11 -9
- package/getEmailCustomizations.js +2 -6
- package/getEmailCustomizations.js.map +1 -1
- package/getGroups.d.ts +11 -25
- package/getGroups.js +2 -2
- package/getGroups.js.map +1 -1
- package/getLogStream.d.ts +8 -39
- package/getLogStream.js +2 -24
- package/getLogStream.js.map +1 -1
- package/getNetworkZone.d.ts +12 -12
- package/getNetworkZone.js +2 -2
- package/getOrgMetadata.d.ts +0 -22
- package/getOrgMetadata.js +0 -22
- package/getOrgMetadata.js.map +1 -1
- package/getRoleSubscription.d.ts +13 -35
- package/getRoleSubscription.js +2 -2
- package/getRoleSubscription.js.map +1 -1
- package/getTemplate.d.ts +10 -8
- package/getTemplate.js +2 -6
- package/getTemplate.js.map +1 -1
- package/getTemplates.d.ts +6 -7
- package/getTemplates.js +2 -6
- package/getTemplates.js.map +1 -1
- package/getTheme.d.ts +14 -12
- package/getTheme.js +2 -6
- package/getTheme.js.map +1 -1
- package/getThemes.d.ts +6 -7
- package/getThemes.js +2 -6
- package/getThemes.js.map +1 -1
- package/getTrustedOrigins.d.ts +7 -4
- package/getTrustedOrigins.js +2 -2
- package/getTrustedOrigins.js.map +1 -1
- package/getUserSecurityQuestions.d.ts +4 -8
- package/getUserSecurityQuestions.js +0 -4
- package/getUserSecurityQuestions.js.map +1 -1
- package/group/getEveryoneGroup.d.ts +10 -5
- package/group/getEveryoneGroup.js +4 -2
- package/group/getEveryoneGroup.js.map +1 -1
- package/group/getGroup.d.ts +17 -26
- package/group/getGroup.js +2 -2
- package/group/getGroup.js.map +1 -1
- package/group/getRule.d.ts +9 -9
- package/group/getRule.js +2 -2
- package/group/group.d.ts +4 -36
- package/group/group.js +1 -33
- package/group/group.js.map +1 -1
- package/group/role.d.ts +37 -81
- package/group/role.js +1 -6
- package/group/role.js.map +1 -1
- package/group/rule.d.ts +12 -20
- package/group/rule.js +0 -2
- package/group/rule.js.map +1 -1
- package/groupMemberships.d.ts +8 -10
- package/groupMemberships.js +2 -4
- package/groupMemberships.js.map +1 -1
- package/groupSchemaProperty.d.ts +57 -59
- package/groupSchemaProperty.js +0 -2
- package/groupSchemaProperty.js.map +1 -1
- package/idp/getMetadataSaml.d.ts +9 -6
- package/idp/getMetadataSaml.js +2 -2
- package/idp/getMetadataSaml.js.map +1 -1
- package/idp/getOidc.d.ts +9 -9
- package/idp/getOidc.js +2 -2
- package/idp/getSaml.d.ts +16 -13
- package/idp/getSaml.js +2 -2
- package/idp/getSaml.js.map +1 -1
- package/idp/getSocial.d.ts +8 -2
- package/idp/getSocial.js +2 -2
- package/idp/getSocial.js.map +1 -1
- package/idp/oidc.d.ts +70 -62
- package/idp/oidc.js +3 -5
- package/idp/oidc.js.map +1 -1
- package/idp/saml.d.ts +64 -86
- package/idp/saml.js +1 -5
- package/idp/saml.js.map +1 -1
- package/idp/samlKey.d.ts +3 -5
- package/idp/samlKey.js +0 -2
- package/idp/samlKey.js.map +1 -1
- package/idp/social.d.ts +99 -69
- package/idp/social.js +11 -5
- package/idp/social.js.map +1 -1
- package/inline/hook.d.ts +4 -26
- package/inline/hook.js +1 -5
- package/inline/hook.js.map +1 -1
- package/linkDefinition.d.ts +2 -3
- package/linkDefinition.js +2 -3
- package/linkDefinition.js.map +1 -1
- package/linkValue.d.ts +7 -9
- package/linkValue.js +1 -3
- package/linkValue.js.map +1 -1
- package/logStream.d.ts +32 -27
- package/logStream.js +23 -9
- package/logStream.js.map +1 -1
- package/network/zone.d.ts +25 -66
- package/network/zone.js +1 -39
- package/network/zone.js.map +1 -1
- package/orgConfiguration.d.ts +4 -9
- package/orgConfiguration.js +1 -3
- package/orgConfiguration.js.map +1 -1
- package/orgSupport.d.ts +4 -7
- package/orgSupport.js +1 -4
- package/orgSupport.js.map +1 -1
- package/package.json +3 -3
- package/policy/getDefaultPolicy.d.ts +9 -7
- package/policy/getDefaultPolicy.js +6 -2
- package/policy/getDefaultPolicy.js.map +1 -1
- package/policy/getPolicy.d.ts +11 -26
- package/policy/getPolicy.js +2 -2
- package/policy/getPolicy.js.map +1 -1
- package/policy/mfa.d.ts +18 -220
- package/policy/mfa.js +0 -10
- package/policy/mfa.js.map +1 -1
- package/policy/password.d.ts +91 -95
- package/policy/password.js +1 -5
- package/policy/password.js.map +1 -1
- package/policy/ruleIdpDiscovery.d.ts +111 -93
- package/policy/ruleIdpDiscovery.js +48 -57
- package/policy/ruleIdpDiscovery.js.map +1 -1
- package/policy/ruleMfa.d.ts +40 -30
- package/policy/ruleMfa.js +1 -3
- package/policy/ruleMfa.js.map +1 -1
- package/policy/rulePassword.d.ts +34 -38
- package/policy/rulePassword.js +1 -5
- package/policy/rulePassword.js.map +1 -1
- package/policy/ruleSignon.d.ts +94 -85
- package/policy/ruleSignon.js +1 -4
- package/policy/ruleSignon.js.map +1 -1
- package/policy/signon.d.ts +16 -20
- package/policy/signon.js +1 -5
- package/policy/signon.js.map +1 -1
- package/policyMfaDefault.d.ts +15 -214
- package/policyMfaDefault.js +2 -9
- package/policyMfaDefault.js.map +1 -1
- package/policyPasswordDefault.d.ts +85 -101
- package/policyPasswordDefault.js +1 -5
- package/policyPasswordDefault.js.map +1 -1
- package/policyProfileEnrollment.d.ts +8 -9
- package/policyProfileEnrollment.js +2 -3
- package/policyProfileEnrollment.js.map +1 -1
- package/policyProfileEnrollmentApps.d.ts +8 -11
- package/policyProfileEnrollmentApps.js +3 -6
- package/policyProfileEnrollmentApps.js.map +1 -1
- package/policyRuleProfileEnrollment.d.ts +42 -31
- package/policyRuleProfileEnrollment.js +2 -3
- package/policyRuleProfileEnrollment.js.map +1 -1
- package/profile/mapping.d.ts +19 -34
- package/profile/mapping.js +4 -4
- package/profile/mapping.js.map +1 -1
- package/rateLimiting.d.ts +8 -17
- package/rateLimiting.js +2 -5
- package/rateLimiting.js.map +1 -1
- package/resourceSet.d.ts +18 -26
- package/resourceSet.js +9 -14
- package/resourceSet.js.map +1 -1
- package/roleSubscription.d.ts +35 -86
- package/roleSubscription.js +2 -2
- package/roleSubscription.js.map +1 -1
- package/securityNotificationEmails.d.ts +4 -7
- package/securityNotificationEmails.js +4 -7
- package/securityNotificationEmails.js.map +1 -1
- package/templateSms.d.ts +4 -8
- package/templateSms.js +1 -5
- package/templateSms.js.map +1 -1
- package/theme.d.ts +46 -46
- package/theme.js +2 -2
- package/threatInsightSettings.d.ts +7 -27
- package/threatInsightSettings.js +1 -3
- package/threatInsightSettings.js.map +1 -1
- package/trustedorigin/origin.d.ts +13 -17
- package/trustedorigin/origin.js +1 -5
- package/trustedorigin/origin.js.map +1 -1
- package/types/input.d.ts +65 -162
- package/types/output.d.ts +75 -275
- package/user/getUser.d.ts +32 -104
- package/user/getUser.js +2 -2
- package/user/getUser.js.map +1 -1
- package/user/getUserProfileMappingSource.d.ts +9 -7
- package/user/getUserProfileMappingSource.js +6 -4
- package/user/getUserProfileMappingSource.js.map +1 -1
- package/user/getUserType.d.ts +7 -7
- package/user/getUserType.js +2 -2
- package/user/getUsers.d.ts +95 -37
- package/user/getUsers.js +64 -24
- package/user/getUsers.js.map +1 -1
- package/user/user.d.ts +160 -209
- package/user/user.js +43 -65
- package/user/user.js.map +1 -1
- package/user/userType.d.ts +1 -5
- package/user/userType.js +1 -5
- package/user/userType.js.map +1 -1
- package/userAdminRoles.d.ts +10 -17
- package/userAdminRoles.js +1 -5
- package/userAdminRoles.js.map +1 -1
- package/userBaseSchemaProperty.d.ts +26 -34
- package/userBaseSchemaProperty.js +2 -10
- package/userBaseSchemaProperty.js.map +1 -1
- package/userFactorQuestion.d.ts +1 -5
- package/userFactorQuestion.js +1 -5
- package/userFactorQuestion.js.map +1 -1
- package/userGroupMemberships.d.ts +3 -3
- package/userSchemaProperty.d.ts +57 -56
- package/userSchemaProperty.js +0 -8
- package/userSchemaProperty.js.map +1 -1
package/policy/ruleSignon.d.ts
CHANGED
|
@@ -2,8 +2,7 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
2
2
|
import * as inputs from "../types/input";
|
|
3
3
|
import * as outputs from "../types/output";
|
|
4
4
|
/**
|
|
5
|
-
* Creates a Sign On Policy Rule. In case `Invalid condition type specified: riskScore.` error is thrown, set `riscLevel`
|
|
6
|
-
* to an empty string, since this feature is not enabled.
|
|
5
|
+
* Creates a Sign On Policy Rule. In case `Invalid condition type specified: riskScore.` error is thrown, set `riscLevel` to an empty string, since this feature is not enabled.
|
|
7
6
|
*
|
|
8
7
|
* ## Example Usage
|
|
9
8
|
*
|
|
@@ -89,8 +88,6 @@ import * as outputs from "../types/output";
|
|
|
89
88
|
*
|
|
90
89
|
* ## Import
|
|
91
90
|
*
|
|
92
|
-
* A Policy Rule can be imported via the Policy and Rule ID.
|
|
93
|
-
*
|
|
94
91
|
* ```sh
|
|
95
92
|
* $ pulumi import okta:policy/ruleSignon:RuleSignon example <policy id>/<rule id>
|
|
96
93
|
* ```
|
|
@@ -112,79 +109,82 @@ export declare class RuleSignon extends pulumi.CustomResource {
|
|
|
112
109
|
*/
|
|
113
110
|
static isInstance(obj: any): obj is RuleSignon;
|
|
114
111
|
/**
|
|
115
|
-
* Allow or deny access based on the rule conditions: `
|
|
112
|
+
* Allow or deny access based on the rule conditions: `ALLOW`, `DENY` or `CHALLENGE`. Default: `ALLOW`
|
|
116
113
|
*/
|
|
117
114
|
readonly access: pulumi.Output<string | undefined>;
|
|
118
115
|
/**
|
|
119
|
-
* Authentication entrypoint: `
|
|
116
|
+
* Authentication entrypoint: `ANY`, `RADIUS` or `LDAP_INTERFACE`. Default: `ANY`
|
|
120
117
|
*/
|
|
121
118
|
readonly authtype: pulumi.Output<string | undefined>;
|
|
122
119
|
/**
|
|
123
|
-
* List of behavior IDs
|
|
120
|
+
* List of behavior IDs
|
|
124
121
|
*/
|
|
125
122
|
readonly behaviors: pulumi.Output<string[] | undefined>;
|
|
126
123
|
/**
|
|
127
|
-
* Auth factor sequences. Should be set if
|
|
124
|
+
* Auth factor sequences. Should be set if 'access = "CHALLENGE"'. - 'primary_criteria_provider' - (Required) Primary
|
|
125
|
+
* provider of the auth section. - 'primary_criteria_factor_type' - (Required) Primary factor type of the auth section. -
|
|
126
|
+
* 'secondary_criteria' - (Optional) Additional authentication steps. - 'provider' - (Required) Provider of the additional
|
|
127
|
+
* authentication step. - 'factor_type' - (Required) Factor type of the additional authentication step.
|
|
128
128
|
*/
|
|
129
129
|
readonly factorSequences: pulumi.Output<outputs.policy.RuleSignonFactorSequence[] | undefined>;
|
|
130
130
|
/**
|
|
131
|
-
*
|
|
132
|
-
*
|
|
133
|
-
* > **WARNING**: Use of `identityProvider` requires a feature flag to be enabled.
|
|
131
|
+
* Apply rule based on the IdP used: `ANY`, `OKTA` or `SPECIFIC_IDP`. Default: `ANY`. > **WARNING**: Use of
|
|
132
|
+
* `identityProvider` requires a feature flag to be enabled.
|
|
134
133
|
*/
|
|
135
134
|
readonly identityProvider: pulumi.Output<string | undefined>;
|
|
136
135
|
/**
|
|
137
|
-
* When identityProvider is `
|
|
136
|
+
* When identityProvider is `SPECIFIC_IDP` then this is the list of IdP IDs to apply the rule on
|
|
138
137
|
*/
|
|
139
138
|
readonly identityProviderIds: pulumi.Output<string[] | undefined>;
|
|
140
139
|
/**
|
|
141
|
-
* Elapsed time before the next MFA challenge
|
|
140
|
+
* Elapsed time before the next MFA challenge
|
|
142
141
|
*/
|
|
143
142
|
readonly mfaLifetime: pulumi.Output<number | undefined>;
|
|
144
143
|
/**
|
|
145
|
-
* Prompt for MFA based on the device used, a factor session lifetime, or every sign-on attempt: `
|
|
144
|
+
* Prompt for MFA based on the device used, a factor session lifetime, or every sign-on attempt: `DEVICE`, `SESSION`
|
|
145
|
+
* or`ALWAYS`.
|
|
146
146
|
*/
|
|
147
147
|
readonly mfaPrompt: pulumi.Output<string | undefined>;
|
|
148
148
|
/**
|
|
149
|
-
* Remember MFA device.
|
|
149
|
+
* Remember MFA device. Default: `false`
|
|
150
150
|
*/
|
|
151
151
|
readonly mfaRememberDevice: pulumi.Output<boolean | undefined>;
|
|
152
152
|
/**
|
|
153
|
-
* Require MFA.
|
|
153
|
+
* Require MFA. Default: `false`
|
|
154
154
|
*/
|
|
155
155
|
readonly mfaRequired: pulumi.Output<boolean | undefined>;
|
|
156
156
|
/**
|
|
157
|
-
* Policy Rule Name
|
|
157
|
+
* Policy Rule Name
|
|
158
158
|
*/
|
|
159
159
|
readonly name: pulumi.Output<string>;
|
|
160
160
|
/**
|
|
161
|
-
* Network selection mode: `
|
|
161
|
+
* Network selection mode: `ANYWHERE`, `ZONE`, `ON_NETWORK`, or `OFF_NETWORK`. Default: `ANYWHERE`
|
|
162
162
|
*/
|
|
163
163
|
readonly networkConnection: pulumi.Output<string | undefined>;
|
|
164
164
|
/**
|
|
165
|
-
*
|
|
165
|
+
* Required if `networkConnection` = `ZONE`. Indicates the network zones to exclude.
|
|
166
166
|
*/
|
|
167
167
|
readonly networkExcludes: pulumi.Output<string[] | undefined>;
|
|
168
168
|
/**
|
|
169
|
-
*
|
|
169
|
+
* Required if `networkConnection` = `ZONE`. Indicates the network zones to include.
|
|
170
170
|
*/
|
|
171
171
|
readonly networkIncludes: pulumi.Output<string[] | undefined>;
|
|
172
172
|
/**
|
|
173
|
-
* Policy ID
|
|
173
|
+
* Policy ID of the Rule
|
|
174
174
|
*/
|
|
175
175
|
readonly policyId: pulumi.Output<string | undefined>;
|
|
176
176
|
/**
|
|
177
|
-
* Rule's primary factor. **WARNING** Ony works as a part of the Identity Engine. Valid values:
|
|
178
|
-
* `
|
|
177
|
+
* Rule's primary factor. **WARNING** Ony works as a part of the Identity Engine. Valid values: `PASSWORD_IDP_ANY_FACTOR`,
|
|
178
|
+
* `PASSWORD_IDP`.
|
|
179
179
|
*/
|
|
180
180
|
readonly primaryFactor: pulumi.Output<string>;
|
|
181
181
|
/**
|
|
182
|
-
*
|
|
182
|
+
* Rule priority. This attribute can be set to a valid priority. To avoid an endless diff situation an error is thrown if
|
|
183
|
+
* an invalid property is provided. The Okta API defaults to the last (lowest) if not provided.
|
|
183
184
|
*/
|
|
184
185
|
readonly priority: pulumi.Output<number | undefined>;
|
|
185
186
|
/**
|
|
186
|
-
* Risc level:
|
|
187
|
-
* set to an empty string in case `RISC_SCORING` org feature flag is disabled.
|
|
187
|
+
* Risc level: ANY, LOW, MEDIUM or HIGH. Default: `ANY`
|
|
188
188
|
*
|
|
189
189
|
* @deprecated Attribute typo, switch to riskLevel instead. Default: `ANY`
|
|
190
190
|
*/
|
|
@@ -194,23 +194,24 @@ export declare class RuleSignon extends pulumi.CustomResource {
|
|
|
194
194
|
*/
|
|
195
195
|
readonly riskLevel: pulumi.Output<string | undefined>;
|
|
196
196
|
/**
|
|
197
|
-
* Max minutes a session can be idle
|
|
197
|
+
* Max minutes a session can be idle. Default: `120`
|
|
198
198
|
*/
|
|
199
199
|
readonly sessionIdle: pulumi.Output<number | undefined>;
|
|
200
200
|
/**
|
|
201
|
-
* Max minutes a session is active: Disable = 0.
|
|
201
|
+
* Max minutes a session is active: Disable = 0. Default: `120`
|
|
202
202
|
*/
|
|
203
203
|
readonly sessionLifetime: pulumi.Output<number | undefined>;
|
|
204
204
|
/**
|
|
205
|
-
* Whether session cookies will last across browser sessions. Okta Administrators can never have persistent session
|
|
205
|
+
* Whether session cookies will last across browser sessions. Okta Administrators can never have persistent session
|
|
206
|
+
* cookies. Default: `false`
|
|
206
207
|
*/
|
|
207
208
|
readonly sessionPersistent: pulumi.Output<boolean | undefined>;
|
|
208
209
|
/**
|
|
209
|
-
* Policy Rule Status: `
|
|
210
|
+
* Policy Rule Status: `ACTIVE` or `INACTIVE`. Default: `ACTIVE`
|
|
210
211
|
*/
|
|
211
212
|
readonly status: pulumi.Output<string | undefined>;
|
|
212
213
|
/**
|
|
213
|
-
*
|
|
214
|
+
* Set of User IDs to Exclude
|
|
214
215
|
*/
|
|
215
216
|
readonly usersExcludeds: pulumi.Output<string[] | undefined>;
|
|
216
217
|
/**
|
|
@@ -227,79 +228,82 @@ export declare class RuleSignon extends pulumi.CustomResource {
|
|
|
227
228
|
*/
|
|
228
229
|
export interface RuleSignonState {
|
|
229
230
|
/**
|
|
230
|
-
* Allow or deny access based on the rule conditions: `
|
|
231
|
+
* Allow or deny access based on the rule conditions: `ALLOW`, `DENY` or `CHALLENGE`. Default: `ALLOW`
|
|
231
232
|
*/
|
|
232
233
|
access?: pulumi.Input<string>;
|
|
233
234
|
/**
|
|
234
|
-
* Authentication entrypoint: `
|
|
235
|
+
* Authentication entrypoint: `ANY`, `RADIUS` or `LDAP_INTERFACE`. Default: `ANY`
|
|
235
236
|
*/
|
|
236
237
|
authtype?: pulumi.Input<string>;
|
|
237
238
|
/**
|
|
238
|
-
* List of behavior IDs
|
|
239
|
+
* List of behavior IDs
|
|
239
240
|
*/
|
|
240
241
|
behaviors?: pulumi.Input<pulumi.Input<string>[]>;
|
|
241
242
|
/**
|
|
242
|
-
* Auth factor sequences. Should be set if
|
|
243
|
+
* Auth factor sequences. Should be set if 'access = "CHALLENGE"'. - 'primary_criteria_provider' - (Required) Primary
|
|
244
|
+
* provider of the auth section. - 'primary_criteria_factor_type' - (Required) Primary factor type of the auth section. -
|
|
245
|
+
* 'secondary_criteria' - (Optional) Additional authentication steps. - 'provider' - (Required) Provider of the additional
|
|
246
|
+
* authentication step. - 'factor_type' - (Required) Factor type of the additional authentication step.
|
|
243
247
|
*/
|
|
244
248
|
factorSequences?: pulumi.Input<pulumi.Input<inputs.policy.RuleSignonFactorSequence>[]>;
|
|
245
249
|
/**
|
|
246
|
-
*
|
|
247
|
-
*
|
|
248
|
-
* > **WARNING**: Use of `identityProvider` requires a feature flag to be enabled.
|
|
250
|
+
* Apply rule based on the IdP used: `ANY`, `OKTA` or `SPECIFIC_IDP`. Default: `ANY`. > **WARNING**: Use of
|
|
251
|
+
* `identityProvider` requires a feature flag to be enabled.
|
|
249
252
|
*/
|
|
250
253
|
identityProvider?: pulumi.Input<string>;
|
|
251
254
|
/**
|
|
252
|
-
* When identityProvider is `
|
|
255
|
+
* When identityProvider is `SPECIFIC_IDP` then this is the list of IdP IDs to apply the rule on
|
|
253
256
|
*/
|
|
254
257
|
identityProviderIds?: pulumi.Input<pulumi.Input<string>[]>;
|
|
255
258
|
/**
|
|
256
|
-
* Elapsed time before the next MFA challenge
|
|
259
|
+
* Elapsed time before the next MFA challenge
|
|
257
260
|
*/
|
|
258
261
|
mfaLifetime?: pulumi.Input<number>;
|
|
259
262
|
/**
|
|
260
|
-
* Prompt for MFA based on the device used, a factor session lifetime, or every sign-on attempt: `
|
|
263
|
+
* Prompt for MFA based on the device used, a factor session lifetime, or every sign-on attempt: `DEVICE`, `SESSION`
|
|
264
|
+
* or`ALWAYS`.
|
|
261
265
|
*/
|
|
262
266
|
mfaPrompt?: pulumi.Input<string>;
|
|
263
267
|
/**
|
|
264
|
-
* Remember MFA device.
|
|
268
|
+
* Remember MFA device. Default: `false`
|
|
265
269
|
*/
|
|
266
270
|
mfaRememberDevice?: pulumi.Input<boolean>;
|
|
267
271
|
/**
|
|
268
|
-
* Require MFA.
|
|
272
|
+
* Require MFA. Default: `false`
|
|
269
273
|
*/
|
|
270
274
|
mfaRequired?: pulumi.Input<boolean>;
|
|
271
275
|
/**
|
|
272
|
-
* Policy Rule Name
|
|
276
|
+
* Policy Rule Name
|
|
273
277
|
*/
|
|
274
278
|
name?: pulumi.Input<string>;
|
|
275
279
|
/**
|
|
276
|
-
* Network selection mode: `
|
|
280
|
+
* Network selection mode: `ANYWHERE`, `ZONE`, `ON_NETWORK`, or `OFF_NETWORK`. Default: `ANYWHERE`
|
|
277
281
|
*/
|
|
278
282
|
networkConnection?: pulumi.Input<string>;
|
|
279
283
|
/**
|
|
280
|
-
*
|
|
284
|
+
* Required if `networkConnection` = `ZONE`. Indicates the network zones to exclude.
|
|
281
285
|
*/
|
|
282
286
|
networkExcludes?: pulumi.Input<pulumi.Input<string>[]>;
|
|
283
287
|
/**
|
|
284
|
-
*
|
|
288
|
+
* Required if `networkConnection` = `ZONE`. Indicates the network zones to include.
|
|
285
289
|
*/
|
|
286
290
|
networkIncludes?: pulumi.Input<pulumi.Input<string>[]>;
|
|
287
291
|
/**
|
|
288
|
-
* Policy ID
|
|
292
|
+
* Policy ID of the Rule
|
|
289
293
|
*/
|
|
290
294
|
policyId?: pulumi.Input<string>;
|
|
291
295
|
/**
|
|
292
|
-
* Rule's primary factor. **WARNING** Ony works as a part of the Identity Engine. Valid values:
|
|
293
|
-
* `
|
|
296
|
+
* Rule's primary factor. **WARNING** Ony works as a part of the Identity Engine. Valid values: `PASSWORD_IDP_ANY_FACTOR`,
|
|
297
|
+
* `PASSWORD_IDP`.
|
|
294
298
|
*/
|
|
295
299
|
primaryFactor?: pulumi.Input<string>;
|
|
296
300
|
/**
|
|
297
|
-
*
|
|
301
|
+
* Rule priority. This attribute can be set to a valid priority. To avoid an endless diff situation an error is thrown if
|
|
302
|
+
* an invalid property is provided. The Okta API defaults to the last (lowest) if not provided.
|
|
298
303
|
*/
|
|
299
304
|
priority?: pulumi.Input<number>;
|
|
300
305
|
/**
|
|
301
|
-
* Risc level:
|
|
302
|
-
* set to an empty string in case `RISC_SCORING` org feature flag is disabled.
|
|
306
|
+
* Risc level: ANY, LOW, MEDIUM or HIGH. Default: `ANY`
|
|
303
307
|
*
|
|
304
308
|
* @deprecated Attribute typo, switch to riskLevel instead. Default: `ANY`
|
|
305
309
|
*/
|
|
@@ -309,23 +313,24 @@ export interface RuleSignonState {
|
|
|
309
313
|
*/
|
|
310
314
|
riskLevel?: pulumi.Input<string>;
|
|
311
315
|
/**
|
|
312
|
-
* Max minutes a session can be idle
|
|
316
|
+
* Max minutes a session can be idle. Default: `120`
|
|
313
317
|
*/
|
|
314
318
|
sessionIdle?: pulumi.Input<number>;
|
|
315
319
|
/**
|
|
316
|
-
* Max minutes a session is active: Disable = 0.
|
|
320
|
+
* Max minutes a session is active: Disable = 0. Default: `120`
|
|
317
321
|
*/
|
|
318
322
|
sessionLifetime?: pulumi.Input<number>;
|
|
319
323
|
/**
|
|
320
|
-
* Whether session cookies will last across browser sessions. Okta Administrators can never have persistent session
|
|
324
|
+
* Whether session cookies will last across browser sessions. Okta Administrators can never have persistent session
|
|
325
|
+
* cookies. Default: `false`
|
|
321
326
|
*/
|
|
322
327
|
sessionPersistent?: pulumi.Input<boolean>;
|
|
323
328
|
/**
|
|
324
|
-
* Policy Rule Status: `
|
|
329
|
+
* Policy Rule Status: `ACTIVE` or `INACTIVE`. Default: `ACTIVE`
|
|
325
330
|
*/
|
|
326
331
|
status?: pulumi.Input<string>;
|
|
327
332
|
/**
|
|
328
|
-
*
|
|
333
|
+
* Set of User IDs to Exclude
|
|
329
334
|
*/
|
|
330
335
|
usersExcludeds?: pulumi.Input<pulumi.Input<string>[]>;
|
|
331
336
|
}
|
|
@@ -334,79 +339,82 @@ export interface RuleSignonState {
|
|
|
334
339
|
*/
|
|
335
340
|
export interface RuleSignonArgs {
|
|
336
341
|
/**
|
|
337
|
-
* Allow or deny access based on the rule conditions: `
|
|
342
|
+
* Allow or deny access based on the rule conditions: `ALLOW`, `DENY` or `CHALLENGE`. Default: `ALLOW`
|
|
338
343
|
*/
|
|
339
344
|
access?: pulumi.Input<string>;
|
|
340
345
|
/**
|
|
341
|
-
* Authentication entrypoint: `
|
|
346
|
+
* Authentication entrypoint: `ANY`, `RADIUS` or `LDAP_INTERFACE`. Default: `ANY`
|
|
342
347
|
*/
|
|
343
348
|
authtype?: pulumi.Input<string>;
|
|
344
349
|
/**
|
|
345
|
-
* List of behavior IDs
|
|
350
|
+
* List of behavior IDs
|
|
346
351
|
*/
|
|
347
352
|
behaviors?: pulumi.Input<pulumi.Input<string>[]>;
|
|
348
353
|
/**
|
|
349
|
-
* Auth factor sequences. Should be set if
|
|
354
|
+
* Auth factor sequences. Should be set if 'access = "CHALLENGE"'. - 'primary_criteria_provider' - (Required) Primary
|
|
355
|
+
* provider of the auth section. - 'primary_criteria_factor_type' - (Required) Primary factor type of the auth section. -
|
|
356
|
+
* 'secondary_criteria' - (Optional) Additional authentication steps. - 'provider' - (Required) Provider of the additional
|
|
357
|
+
* authentication step. - 'factor_type' - (Required) Factor type of the additional authentication step.
|
|
350
358
|
*/
|
|
351
359
|
factorSequences?: pulumi.Input<pulumi.Input<inputs.policy.RuleSignonFactorSequence>[]>;
|
|
352
360
|
/**
|
|
353
|
-
*
|
|
354
|
-
*
|
|
355
|
-
* > **WARNING**: Use of `identityProvider` requires a feature flag to be enabled.
|
|
361
|
+
* Apply rule based on the IdP used: `ANY`, `OKTA` or `SPECIFIC_IDP`. Default: `ANY`. > **WARNING**: Use of
|
|
362
|
+
* `identityProvider` requires a feature flag to be enabled.
|
|
356
363
|
*/
|
|
357
364
|
identityProvider?: pulumi.Input<string>;
|
|
358
365
|
/**
|
|
359
|
-
* When identityProvider is `
|
|
366
|
+
* When identityProvider is `SPECIFIC_IDP` then this is the list of IdP IDs to apply the rule on
|
|
360
367
|
*/
|
|
361
368
|
identityProviderIds?: pulumi.Input<pulumi.Input<string>[]>;
|
|
362
369
|
/**
|
|
363
|
-
* Elapsed time before the next MFA challenge
|
|
370
|
+
* Elapsed time before the next MFA challenge
|
|
364
371
|
*/
|
|
365
372
|
mfaLifetime?: pulumi.Input<number>;
|
|
366
373
|
/**
|
|
367
|
-
* Prompt for MFA based on the device used, a factor session lifetime, or every sign-on attempt: `
|
|
374
|
+
* Prompt for MFA based on the device used, a factor session lifetime, or every sign-on attempt: `DEVICE`, `SESSION`
|
|
375
|
+
* or`ALWAYS`.
|
|
368
376
|
*/
|
|
369
377
|
mfaPrompt?: pulumi.Input<string>;
|
|
370
378
|
/**
|
|
371
|
-
* Remember MFA device.
|
|
379
|
+
* Remember MFA device. Default: `false`
|
|
372
380
|
*/
|
|
373
381
|
mfaRememberDevice?: pulumi.Input<boolean>;
|
|
374
382
|
/**
|
|
375
|
-
* Require MFA.
|
|
383
|
+
* Require MFA. Default: `false`
|
|
376
384
|
*/
|
|
377
385
|
mfaRequired?: pulumi.Input<boolean>;
|
|
378
386
|
/**
|
|
379
|
-
* Policy Rule Name
|
|
387
|
+
* Policy Rule Name
|
|
380
388
|
*/
|
|
381
389
|
name?: pulumi.Input<string>;
|
|
382
390
|
/**
|
|
383
|
-
* Network selection mode: `
|
|
391
|
+
* Network selection mode: `ANYWHERE`, `ZONE`, `ON_NETWORK`, or `OFF_NETWORK`. Default: `ANYWHERE`
|
|
384
392
|
*/
|
|
385
393
|
networkConnection?: pulumi.Input<string>;
|
|
386
394
|
/**
|
|
387
|
-
*
|
|
395
|
+
* Required if `networkConnection` = `ZONE`. Indicates the network zones to exclude.
|
|
388
396
|
*/
|
|
389
397
|
networkExcludes?: pulumi.Input<pulumi.Input<string>[]>;
|
|
390
398
|
/**
|
|
391
|
-
*
|
|
399
|
+
* Required if `networkConnection` = `ZONE`. Indicates the network zones to include.
|
|
392
400
|
*/
|
|
393
401
|
networkIncludes?: pulumi.Input<pulumi.Input<string>[]>;
|
|
394
402
|
/**
|
|
395
|
-
* Policy ID
|
|
403
|
+
* Policy ID of the Rule
|
|
396
404
|
*/
|
|
397
405
|
policyId?: pulumi.Input<string>;
|
|
398
406
|
/**
|
|
399
|
-
* Rule's primary factor. **WARNING** Ony works as a part of the Identity Engine. Valid values:
|
|
400
|
-
* `
|
|
407
|
+
* Rule's primary factor. **WARNING** Ony works as a part of the Identity Engine. Valid values: `PASSWORD_IDP_ANY_FACTOR`,
|
|
408
|
+
* `PASSWORD_IDP`.
|
|
401
409
|
*/
|
|
402
410
|
primaryFactor?: pulumi.Input<string>;
|
|
403
411
|
/**
|
|
404
|
-
*
|
|
412
|
+
* Rule priority. This attribute can be set to a valid priority. To avoid an endless diff situation an error is thrown if
|
|
413
|
+
* an invalid property is provided. The Okta API defaults to the last (lowest) if not provided.
|
|
405
414
|
*/
|
|
406
415
|
priority?: pulumi.Input<number>;
|
|
407
416
|
/**
|
|
408
|
-
* Risc level:
|
|
409
|
-
* set to an empty string in case `RISC_SCORING` org feature flag is disabled.
|
|
417
|
+
* Risc level: ANY, LOW, MEDIUM or HIGH. Default: `ANY`
|
|
410
418
|
*
|
|
411
419
|
* @deprecated Attribute typo, switch to riskLevel instead. Default: `ANY`
|
|
412
420
|
*/
|
|
@@ -416,23 +424,24 @@ export interface RuleSignonArgs {
|
|
|
416
424
|
*/
|
|
417
425
|
riskLevel?: pulumi.Input<string>;
|
|
418
426
|
/**
|
|
419
|
-
* Max minutes a session can be idle
|
|
427
|
+
* Max minutes a session can be idle. Default: `120`
|
|
420
428
|
*/
|
|
421
429
|
sessionIdle?: pulumi.Input<number>;
|
|
422
430
|
/**
|
|
423
|
-
* Max minutes a session is active: Disable = 0.
|
|
431
|
+
* Max minutes a session is active: Disable = 0. Default: `120`
|
|
424
432
|
*/
|
|
425
433
|
sessionLifetime?: pulumi.Input<number>;
|
|
426
434
|
/**
|
|
427
|
-
* Whether session cookies will last across browser sessions. Okta Administrators can never have persistent session
|
|
435
|
+
* Whether session cookies will last across browser sessions. Okta Administrators can never have persistent session
|
|
436
|
+
* cookies. Default: `false`
|
|
428
437
|
*/
|
|
429
438
|
sessionPersistent?: pulumi.Input<boolean>;
|
|
430
439
|
/**
|
|
431
|
-
* Policy Rule Status: `
|
|
440
|
+
* Policy Rule Status: `ACTIVE` or `INACTIVE`. Default: `ACTIVE`
|
|
432
441
|
*/
|
|
433
442
|
status?: pulumi.Input<string>;
|
|
434
443
|
/**
|
|
435
|
-
*
|
|
444
|
+
* Set of User IDs to Exclude
|
|
436
445
|
*/
|
|
437
446
|
usersExcludeds?: pulumi.Input<pulumi.Input<string>[]>;
|
|
438
447
|
}
|
package/policy/ruleSignon.js
CHANGED
|
@@ -6,8 +6,7 @@ exports.RuleSignon = void 0;
|
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("../utilities");
|
|
8
8
|
/**
|
|
9
|
-
* Creates a Sign On Policy Rule. In case `Invalid condition type specified: riskScore.` error is thrown, set `riscLevel`
|
|
10
|
-
* to an empty string, since this feature is not enabled.
|
|
9
|
+
* Creates a Sign On Policy Rule. In case `Invalid condition type specified: riskScore.` error is thrown, set `riscLevel` to an empty string, since this feature is not enabled.
|
|
11
10
|
*
|
|
12
11
|
* ## Example Usage
|
|
13
12
|
*
|
|
@@ -93,8 +92,6 @@ const utilities = require("../utilities");
|
|
|
93
92
|
*
|
|
94
93
|
* ## Import
|
|
95
94
|
*
|
|
96
|
-
* A Policy Rule can be imported via the Policy and Rule ID.
|
|
97
|
-
*
|
|
98
95
|
* ```sh
|
|
99
96
|
* $ pulumi import okta:policy/ruleSignon:RuleSignon example <policy id>/<rule id>
|
|
100
97
|
* ```
|
package/policy/ruleSignon.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"ruleSignon.js","sourceRoot":"","sources":["../../policy/ruleSignon.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,0CAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"ruleSignon.js","sourceRoot":"","sources":["../../policy/ruleSignon.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0FG;AACH,MAAa,UAAW,SAAQ,MAAM,CAAC,cAAc;IACjD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAuB,EAAE,IAAmC;QACrH,OAAO,IAAI,UAAU,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACjE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,UAAU,CAAC,YAAY,CAAC;IAC3D,CAAC;IAqHD,YAAY,IAAY,EAAE,WAA8C,EAAE,IAAmC;QACzG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA0C,CAAC;YACzD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/E;aAAM;YACH,MAAM,IAAI,GAAG,WAAyC,CAAC;YACvD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7E;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC/D,CAAC;;AAzML,gCA0MC;AA5LG,gBAAgB;AACO,uBAAY,GAAG,mCAAmC,CAAC"}
|
package/policy/signon.d.ts
CHANGED
|
@@ -1,8 +1,6 @@
|
|
|
1
1
|
import * as pulumi from "@pulumi/pulumi";
|
|
2
2
|
/**
|
|
3
|
-
* Creates a Sign On Policy.
|
|
4
|
-
*
|
|
5
|
-
* This resource allows you to create and configure a Sign On Policy.
|
|
3
|
+
* Creates a Sign On Policy. This resource allows you to create and configure a Sign On Policy.
|
|
6
4
|
*
|
|
7
5
|
* ## Example Usage
|
|
8
6
|
*
|
|
@@ -20,8 +18,6 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
20
18
|
*
|
|
21
19
|
* ## Import
|
|
22
20
|
*
|
|
23
|
-
* A Sign On Policy can be imported via the Okta ID.
|
|
24
|
-
*
|
|
25
21
|
* ```sh
|
|
26
22
|
* $ pulumi import okta:policy/signon:Signon example <policy id>
|
|
27
23
|
* ```
|
|
@@ -43,23 +39,23 @@ export declare class Signon extends pulumi.CustomResource {
|
|
|
43
39
|
*/
|
|
44
40
|
static isInstance(obj: any): obj is Signon;
|
|
45
41
|
/**
|
|
46
|
-
* Policy Description
|
|
42
|
+
* Policy Description
|
|
47
43
|
*/
|
|
48
44
|
readonly description: pulumi.Output<string | undefined>;
|
|
49
45
|
/**
|
|
50
|
-
* List of Group IDs to Include
|
|
46
|
+
* List of Group IDs to Include
|
|
51
47
|
*/
|
|
52
48
|
readonly groupsIncludeds: pulumi.Output<string[] | undefined>;
|
|
53
49
|
/**
|
|
54
|
-
* Policy Name
|
|
50
|
+
* Policy Name
|
|
55
51
|
*/
|
|
56
52
|
readonly name: pulumi.Output<string>;
|
|
57
53
|
/**
|
|
58
|
-
* Priority
|
|
54
|
+
* Policy Priority, this attribute can be set to a valid priority. To avoid endless diff situation we error if an invalid priority is provided. API defaults it to the last (lowest) if not there.
|
|
59
55
|
*/
|
|
60
56
|
readonly priority: pulumi.Output<number | undefined>;
|
|
61
57
|
/**
|
|
62
|
-
* Policy Status: `
|
|
58
|
+
* Policy Status: `ACTIVE` or `INACTIVE`. Default: `ACTIVE`
|
|
63
59
|
*/
|
|
64
60
|
readonly status: pulumi.Output<string | undefined>;
|
|
65
61
|
/**
|
|
@@ -76,23 +72,23 @@ export declare class Signon extends pulumi.CustomResource {
|
|
|
76
72
|
*/
|
|
77
73
|
export interface SignonState {
|
|
78
74
|
/**
|
|
79
|
-
* Policy Description
|
|
75
|
+
* Policy Description
|
|
80
76
|
*/
|
|
81
77
|
description?: pulumi.Input<string>;
|
|
82
78
|
/**
|
|
83
|
-
* List of Group IDs to Include
|
|
79
|
+
* List of Group IDs to Include
|
|
84
80
|
*/
|
|
85
81
|
groupsIncludeds?: pulumi.Input<pulumi.Input<string>[]>;
|
|
86
82
|
/**
|
|
87
|
-
* Policy Name
|
|
83
|
+
* Policy Name
|
|
88
84
|
*/
|
|
89
85
|
name?: pulumi.Input<string>;
|
|
90
86
|
/**
|
|
91
|
-
* Priority
|
|
87
|
+
* Policy Priority, this attribute can be set to a valid priority. To avoid endless diff situation we error if an invalid priority is provided. API defaults it to the last (lowest) if not there.
|
|
92
88
|
*/
|
|
93
89
|
priority?: pulumi.Input<number>;
|
|
94
90
|
/**
|
|
95
|
-
* Policy Status: `
|
|
91
|
+
* Policy Status: `ACTIVE` or `INACTIVE`. Default: `ACTIVE`
|
|
96
92
|
*/
|
|
97
93
|
status?: pulumi.Input<string>;
|
|
98
94
|
}
|
|
@@ -101,23 +97,23 @@ export interface SignonState {
|
|
|
101
97
|
*/
|
|
102
98
|
export interface SignonArgs {
|
|
103
99
|
/**
|
|
104
|
-
* Policy Description
|
|
100
|
+
* Policy Description
|
|
105
101
|
*/
|
|
106
102
|
description?: pulumi.Input<string>;
|
|
107
103
|
/**
|
|
108
|
-
* List of Group IDs to Include
|
|
104
|
+
* List of Group IDs to Include
|
|
109
105
|
*/
|
|
110
106
|
groupsIncludeds?: pulumi.Input<pulumi.Input<string>[]>;
|
|
111
107
|
/**
|
|
112
|
-
* Policy Name
|
|
108
|
+
* Policy Name
|
|
113
109
|
*/
|
|
114
110
|
name?: pulumi.Input<string>;
|
|
115
111
|
/**
|
|
116
|
-
* Priority
|
|
112
|
+
* Policy Priority, this attribute can be set to a valid priority. To avoid endless diff situation we error if an invalid priority is provided. API defaults it to the last (lowest) if not there.
|
|
117
113
|
*/
|
|
118
114
|
priority?: pulumi.Input<number>;
|
|
119
115
|
/**
|
|
120
|
-
* Policy Status: `
|
|
116
|
+
* Policy Status: `ACTIVE` or `INACTIVE`. Default: `ACTIVE`
|
|
121
117
|
*/
|
|
122
118
|
status?: pulumi.Input<string>;
|
|
123
119
|
}
|
package/policy/signon.js
CHANGED
|
@@ -6,9 +6,7 @@ exports.Signon = void 0;
|
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("../utilities");
|
|
8
8
|
/**
|
|
9
|
-
* Creates a Sign On Policy.
|
|
10
|
-
*
|
|
11
|
-
* This resource allows you to create and configure a Sign On Policy.
|
|
9
|
+
* Creates a Sign On Policy. This resource allows you to create and configure a Sign On Policy.
|
|
12
10
|
*
|
|
13
11
|
* ## Example Usage
|
|
14
12
|
*
|
|
@@ -26,8 +24,6 @@ const utilities = require("../utilities");
|
|
|
26
24
|
*
|
|
27
25
|
* ## Import
|
|
28
26
|
*
|
|
29
|
-
* A Sign On Policy can be imported via the Okta ID.
|
|
30
|
-
*
|
|
31
27
|
* ```sh
|
|
32
28
|
* $ pulumi import okta:policy/signon:Signon example <policy id>
|
|
33
29
|
* ```
|
package/policy/signon.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"signon.js","sourceRoot":"","sources":["../../policy/signon.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"signon.js","sourceRoot":"","sources":["../../policy/signon.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC7D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;IA+BD,YAAY,IAAY,EAAE,WAAsC,EAAE,IAAmC;QACjG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsC,CAAC;YACrD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAAqC,CAAC;YACnD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;;AA7EL,wBA8EC;AAhEG,gBAAgB;AACO,mBAAY,GAAG,2BAA2B,CAAC"}
|